IBSA Nordic ApS has always paid the utmost attention to confidentiality, protection and security of the information in its possession, even more so if it relates to the personal data of its customers and those with whom they come into contact.
The purpose of this Policy is to describe the management approach to processing the personal data of users/visitors of this website, which can be accessed at https://shopibsadermabaltic.com/.
Regulatory references – This communication is provided in compliance with EU legislation on the personal data processing (Regulation (EU) 2016/679 and Directive 2002/58/EC).
Data Controller – IBSA Nordic ApS – Kalvebod Brygge 45 2nd floor, DK-1560 Copenhagen V, Denmark, CVR number: 36405449 (hereinafter also referred to as the “Data Controller”).
Scope of this policy – This Privacy Policy refers to this website and not to other websites, not attributable to the Data Controller, that can be browsed by the user via links.
Redirect to external sites – From this website it is possible to connect to other third-party websites using specific links. The Data Controller declines any liability with respect to the management of personal data by third-party sites and the management of authentication credentials provided by third parties.
Purpose – The main purpose of the website is to provide information.
The site may contain sections within which the user can be asked to provide personal data, such as the “Contacts” section. In these sections, specific privacy policies will be available with their purposes specified and, where applicable, specific fields for obtaining consent to the use of personal data.
Legal basis of the data processing – The above-mentioned privacy policies indicate the legal basis for the processing of personal data.
Consent to data processing – Where necessary, pursuant to art. 6.1 letter a) of Regulation (EU) 2016/679, the visitor is asked to freely express consent to authorise the collection and subsequent use and retention of personal data.
Browsing data or metadata
During normal operations, the computer systems and software procedures used to run this website acquire certain traces or metadata (considered personal data), the transmission of which is implicit in the use of internet communication protocols. The capture of such information (which is therefore also known as “passive”) can take place even in the absence of registration for the service by the user and without the user playing an active role.
These data, necessary for use of the web services, are also processed for the purpose of:
These data could be used to ascertain liability in the event of potential cyber crimes against the site or at the request of the public authority.
Social media – The personal data of the user profile of a visitor to IBSA’s social media profiles and all related data are used to follow up on requests or messages, where necessary.
Only for professional contact, the above-mentioned personal data may become part of our database, to be re-contacted and to be updated on our news in terms of products/services and on our participation in trade fairs and events.
Cookies (cross-reference) – With regard to the installation of cookies by this website, please refer to this website’s Cookies policy.
Processing methods – Personal data are processed using electronic procedures and media.
Retention of personal data
Personal data are retained for the time strictly necessary to achieve the purposes for which the data were collected and processed and in any case with respect for your rights and in compliance with legal requirements.
The data collected in specific sections of the site are retained in accordance with the timing specified in the related section of the Policy.
Optional provision of data
The provision of personal data requested from the data subject is optional unless otherwise specified; however, failure to provide them may make it impossible to fulfil the request or to carry out the activity indicated.
Data processing venue – The processing connected to the web services of this site takes place at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Tyskland (Company of the Datacentre where the data are archived) and BrandMonkey ApS, Jernbanegade 40C, 4000 Roskilde, Denmark. (Agency that manages the website)
Scope of circulation of personal data – Unless otherwise specified in the specific Policies, the personal data acquired through this website are accessed only by parties acting on behalf of the Data Controller, specifically designated as data processors or officers responsible for managing the requested service.
Dissemination of personal data acquired by the site – The personal data acquired by the site are not disseminated to unspecified recipients.
Foreign data flows – The above-mentioned personal data, solely for the purposes referred to in the “Purpose” section, may be communicated and/or transferred to third parties operating in EU countries or to non-EU countries with the adoption of appropriate safeguards to ensure data protection and the security of data transfers.
Data processors – The updated list of the group’s data processors and affiliates is available by sending a request to nordic.contact@ibsagroup.com.
Data Protection Officer – The Data Controller relies on a personal data protection officer (also known as Data Protection Officer or “DPO”). The DPO may be contacted through the following communication channel: nordic.contact@ibsagroup.com.
Personal data protection rights – In relation to the processing of personal data, the data subject may at any time obtain confirmation of the existence or otherwise of such data from the Data Controller and to know its content and origin, request that it be supplemented or rectified or, in the cases established by law, request the portability, processing restriction or erasure of the data processed, as well as object to data processing for legitimate reasons; you can obtain the updated list of Data Processors upon request. The data subject also has the right to lodge a complaint with the Data Protection Authority if they believe their rights have not been respected or have not received a response to their requests according to law.
Methods for exercising rights – For the exercise of rights, please contact nordic.contact@ibsagroup.com.
Changes to the policy – The entry into force of new sector regulations, as well as the constant review and updating of services for users, could make it necessary to change personal data processing methods. It is therefore possible that this policy may change over time, so the user is invited to periodically consult this page. To this end, the policy document shows the date of the most recent update.
Last Update: 11/11/2024